Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/8yw7FhMeQWi8e4f5CXelkoy7dTo.roa
File: 8yw7FhMeQWi8e4f5CXelkoy7dTo.roa (raw, json)
Hash identifier: 6vCq8Q0/L4aJ77lrw3jqunneIfTWQtjT6Exb2fz9WhI=
Subject key identifier: F3:2C:3B:16:13:1E:41:68:BC:7B:87:F9:09:77:A5:92:8C:BB:75:3A
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019F60E983D775D18DCB12B1A55ADAEBD2E8
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/8yw7FhMeQWi8e4f5CXelkoy7dTo.roa
Signing time: Tue 14 Jul 2026 13:55:44 +0000
ROA not before: Tue 14 Jul 2026 13:55:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197256
IP address blocks: 222.167.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:60:e9:83:d7:75:d1:8d:cb:12:b1:a5:5a:da:eb:d2:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Jul 14 13:55:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f32c3b16131e4168bc7b87f90977a5928cbb753a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:81:13:71:0b:bd:af:80:69:67:b3:63:ec:f4:
60:64:0d:41:eb:18:1d:77:e5:b8:d2:ec:c1:47:26:
97:c8:da:d3:d2:6b:d2:bd:4d:10:2f:b3:bc:98:91:
6d:0d:9b:2d:f7:1c:b2:ea:dd:3b:39:e3:45:ce:e3:
df:7e:c2:38:0e:0e:f2:3c:00:e9:94:d3:03:8e:7a:
37:a2:f3:95:14:bf:de:61:12:3d:67:8c:47:59:bc:
06:78:d9:d2:f1:41:34:6e:c3:9c:e5:0f:13:9e:e3:
99:45:14:49:ab:5f:af:2e:02:7d:b5:85:5b:38:26:
e6:28:62:30:e8:01:f0:29:1e:d3:8e:d5:18:0b:f9:
e0:88:4d:86:a6:d6:47:10:47:fa:49:57:66:e8:2c:
78:cd:62:fe:bf:6b:0b:8d:24:0d:20:ad:19:b6:be:
b8:c0:07:09:7e:90:11:f9:0a:9e:c8:26:82:a6:ef:
7e:f0:53:41:3d:6c:53:ca:91:a9:60:78:a9:e6:54:
da:73:97:35:32:f1:73:cd:a5:da:cd:b6:a0:ac:88:
36:dc:ce:7c:47:ea:14:a4:4f:12:64:5c:c7:6a:e6:
f9:cd:5c:17:27:c8:83:82:5c:c7:6e:e3:21:2b:d2:
c6:28:5c:8b:4c:2f:56:65:73:f7:b6:85:8d:7f:9d:
69:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:2C:3B:16:13:1E:41:68:BC:7B:87:F9:09:77:A5:92:8C:BB:75:3A
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/8yw7FhMeQWi8e4f5CXelkoy7dTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
222.167.228.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:82:93:fb:4e:10:3e:2a:e2:02:21:3c:97:f3:c4:3a:96:19:
f5:67:27:7d:14:0b:59:07:24:a0:30:16:3d:cb:d4:2e:6c:92:
3a:f6:76:27:bc:03:ae:2e:d1:c8:20:85:a8:1b:66:9f:ec:f2:
2b:6c:1c:c8:65:6a:ba:78:97:b8:23:36:77:5f:fa:90:13:d0:
e7:30:cd:80:7f:5a:f7:87:13:db:ed:82:a9:03:8f:81:76:ee:
07:98:82:71:e8:0d:27:01:3a:99:02:f3:84:a7:e0:ee:5f:6f:
6e:8f:9e:eb:38:09:6a:9a:3d:1c:0f:cb:44:b3:d3:26:7e:24:
52:ce:59:4b:40:8f:ae:43:05:44:db:0f:09:ad:a7:7e:45:f1:
1a:db:23:41:7d:9d:98:87:7e:b5:8f:d7:90:ef:d7:a7:76:25:
0b:5b:f1:34:2b:59:f5:9b:ad:2f:e3:f1:4b:6b:b9:a5:cf:9a:
77:a8:88:0c:c0:df:32:9a:9e:d0:20:63:fb:db:68:90:35:b9:
e6:2f:e2:39:3f:a9:f4:23:b4:49:88:79:bf:b4:e3:b8:f3:60:
b3:65:25:00:8c:e9:23:16:12:64:5d:e2:32:a2:e2:4d:54:cf:
6c:6a:95:45:f1:ae:95:cc:2d:df:79:06:41:34:b2:f7:52:49:
5b:00:9a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:32:03 2026 by rpki-client